$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133312e3235352e3135362e302f32322d3232203d3e20323634343933.roa File: 3133312e3235352e3135362e302f32322d3232203d3e20323634343933.roa (raw, json) Hash identifier: D8TfdUkUH4NAEtLEGPmB+xl7I0mhnDlSsgQhMNPP/4I= Subject key identifier: 3B:95:74:4C:BF:51:A5:33:63:CB:CC:B8:E6:3E:76:C1:12:5D:FA:15 Certificate issuer: /CN=DDF75D11A85F5023747B20E973994EC53D23A68E Certificate serial: 18902AB59C5A8F2CEF9F605562C15343D028D3FB Authority key identifier: DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer Subject info access: rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133312e3235352e3135362e302f32322d3232203d3e20323634343933.roa Signing time: Thu 09 Oct 2025 21:02:30 +0000 ROA not before: Thu 09 Oct 2025 20:57:30 +0000 ROA not after: Thu 08 Oct 2026 21:02:30 +0000 asID: 264493 IP address blocks: 131.255.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 12:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:90:2a:b5:9c:5a:8f:2c:ef:9f:60:55:62:c1:53:43:d0:28:d3:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDF75D11A85F5023747B20E973994EC53D23A68E Validity Not Before: Oct 9 20:57:30 2025 GMT Not After : Oct 8 21:02:30 2026 GMT Subject: CN=3B95744CBF51A53363CBCCB8E63E76C1125DFA15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:dc:b3:5c:60:a2:8b:56:f4:41:53:a0:dc:cf: 15:36:68:ac:3c:da:06:af:23:08:97:4e:df:72:b0: df:a8:64:64:28:0e:9b:8a:59:37:ad:05:df:3b:32: 13:db:e8:d6:c6:aa:54:b1:2b:5d:1c:1d:7e:88:eb: 3e:d5:f9:c1:2d:ba:ec:fe:38:47:91:cb:9c:c9:6f: 91:95:66:5c:88:da:f2:5e:1d:a1:71:20:e6:fe:c0: 86:bb:fd:d4:47:8c:28:93:14:0a:c2:19:c6:0d:85: 35:77:11:5e:6f:d3:ff:74:8f:f3:14:d3:ab:4b:47: 38:a0:94:8c:e1:31:d3:14:83:83:5a:8b:55:8b:91: 42:d8:7e:d5:82:d8:e4:f9:b9:6c:75:09:f0:2b:9a: 6a:a5:68:9c:67:dd:81:1b:bc:74:2e:f6:33:ac:78: 66:58:a8:35:0d:4f:d9:95:b6:91:67:54:67:b1:d8: d4:c3:89:8b:3e:1f:bf:a2:6b:66:66:55:66:5c:5e: fd:e4:26:05:79:94:0e:df:16:7d:31:05:c4:75:85: cd:14:54:15:ab:92:db:54:2c:0e:08:49:9c:55:1d: 82:72:46:fb:b1:bd:23:43:7f:a7:c8:ac:c3:0a:07: c6:3f:17:7f:05:90:ae:b9:d1:d2:80:74:e2:af:9a: 38:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:95:74:4C:BF:51:A5:33:63:CB:CC:B8:E6:3E:76:C1:12:5D:FA:15 X509v3 Authority Key Identifier: keyid:DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133312e3235352e3135362e302f32322d3232203d3e20323634343933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.255.156.0/22 Signature Algorithm: sha256WithRSAEncryption 54:86:78:88:6e:5b:c8:23:1c:c5:b9:5f:01:bb:d1:9f:2b:3d: 78:27:c7:fa:78:7f:12:2a:e3:30:53:62:c5:10:a4:32:b7:12: 96:14:e8:4d:16:03:52:86:83:23:86:e4:33:eb:b0:ce:48:7d: ba:2e:84:15:ca:8e:a6:5e:20:4c:eb:e6:5e:45:cc:09:fc:2e: 25:67:b0:ac:df:9f:81:44:88:3e:d4:d6:ba:6e:3d:6e:ba:d3: 2d:ee:71:20:6c:52:63:6a:cd:44:f5:27:95:e6:8e:a5:90:c8: f0:f7:b5:d3:13:b2:04:3b:a4:d5:0d:b0:5f:6d:da:a8:3c:0a: 65:6f:5a:29:60:38:da:68:c0:a0:43:c9:e6:1e:ed:a9:85:2b: fe:5f:7c:2d:18:43:01:e4:dc:a2:43:bf:c1:1c:8f:32:69:a6: 0c:04:f3:38:3e:37:eb:f1:6f:72:c1:8f:52:8d:cf:c9:c5:65: ae:f6:e4:24:59:4d:f1:26:f9:63:78:79:46:4c:8c:8f:f7:00: b9:c5:41:c1:fd:63:bc:77:fd:7b:7b:86:da:b8:36:57:57:6f: 47:35:2d:01:36:2a:d5:97:b8:6e:fd:26:ee:a3:c6:01:cc:5f: 4a:65:3d:73:5b:37:d8:ab:e8:5b:8f:57:e6:b4:fc:1c:ce:a1: 26:d8:62:17 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUGJAqtZxajyzvn2BVYsFTQ9Ao0/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERGNzVEMTFBODVGNTAyMzc0N0IyMEU5NzM5OTRFQzUz RDIzQTY4RTAeFw0yNTEwMDkyMDU3MzBaFw0yNjEwMDgyMTAyMzBaMDMxMTAvBgNV BAMTKDNCOTU3NDRDQkY1MUE1MzM2M0NCQ0NCOEU2M0U3NkMxMTI1REZBMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ3LNcYKKLVvRBU6DczxU2aKw8 2gavIwiXTt9ysN+oZGQoDpuKWTetBd87MhPb6NbGqlSxK10cHX6I6z7V+cEtuuz+ OEeRy5zJb5GVZlyI2vJeHaFxIOb+wIa7/dRHjCiTFArCGcYNhTV3EV5v0/90j/MU 06tLRziglIzhMdMUg4Nai1WLkULYftWC2OT5uWx1CfArmmqlaJxn3YEbvHQu9jOs eGZYqDUNT9mVtpFnVGex2NTDiYs+H7+ia2ZmVWZcXv3kJgV5lA7fFn0xBcR1hc0U VBWrkttULA4ISZxVHYJyRvuxvSNDf6fIrMMKB8Y/F38FkK650dKAdOKvmjgPAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUO5V0TL9RpTNjy8y45j52wRJd+hUwHwYDVR0j BBgwFoAU3fddEahfUCN0eyDpc5lOxT0jpo4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOU03WlFMVXp5Tkt2M3lTRTNGQ05KQ0t1bXdLTkN0Y3pTVFlwRjdIOE1n cmYvMC9EREY3NUQxMUE4NUY1MDIzNzQ3QjIwRTk3Mzk5NEVDNTNEMjNBNjhFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RERjc1RDExQTg1RjUwMjM3 NDdCMjBFOTczOTk0RUM1M0QyM0E2OEUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzlNN1pRTFV6eU5LdjN5U0UzRkNOSkNLdW13S05DdGN6U1RZcEY3SDhNZ3JmLzAv MzEzMzMxMmUzMjM1MzUyZTMxMzUzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy MzYzNDM0MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoP/nDANBgkqhkiG9w0BAQsFAAOCAQEAVIZ4 iG5byCMcxblfAbvRnys9eCfH+nh/EirjMFNixRCkMrcSlhToTRYDUoaDI4bkM+uw zkh9ui6EFcqOpl4gTOvmXkXMCfwuJWewrN+fgUSIPtTWum49brrTLe5xIGxSY2rN RPUnleaOpZDI8Pe10xOyBDuk1Q2wX23aqDwKZW9aKWA42mjAoEPJ5h7tqYUr/l98 LRhDAeTcokO/wRyPMmmmDATzOD436/FvcsGPUo3PycVlrvbkJFlN8Sb5Y3h5RkyM j/cAucVBwf1jvHf9e3uG2rg2V1dvRzUtATYq1Ze4bv0m7qPGAcxfSmU9c1s32Kvo W49X5rT8HM6hJthiFw== -----END CERTIFICATE-----Generated at Tue Oct 21 02:04:35 2025 by rpki-client